[Snort-sigs] Signature Naming Convention
cmg at ...435...
Tue Apr 16 09:05:03 EDT 2002
Robert Wagner <rwagner at ...447...> writes:
> "INFO MSN chat access" in the logs would prompt me to look at the info.rules
> if we want to change or disable the rule. This rule is located in the
> policy.rules. Should it read: "POLICY MSN chat access"? All of the
> policy.rules say INFO....
I concur. Too bad the obvious doesn't hit you until we're at a metric
scad of signatures.
Chris Green <cmg at ...435...>
"I'm beginning to think that my router may be confused."
More information about the Snort-sigs